A Health and Safety Compliance Checklist That Works

Build a health and safety compliance checklist that turns site checks, training, maintenance and evidence into clear, live audit-ready control every day.

A missed fire-door check, an expired contractor certificate or a risk assessment sitting in an unmanaged folder can become a serious issue quickly. A health and safety compliance checklist gives teams a controlled way to turn obligations into repeatable work, assign ownership and retain evidence that the work happened.

The strongest checklists do not try to reproduce every line of legislation. They define what must happen at each site, how often it must happen, who is accountable and what proof must be retained. That distinction is what turns a document into an operational control.

Start with your actual risk profile

A generic checklist is a useful prompt, but it is not a compliance system. The controls needed in an office, school, warehouse, care setting or manufacturing site will differ according to the building, equipment, work activities, occupants and contractors involved.

Start with a clear register of sites, assets, activities and legal duties. For a UK organisation, this may include duties under the Health and Safety at Work etc. Act 1974, fire safety requirements, workplace regulations, COSHH, PUWER, LOLER and electrical safety obligations. Which requirements apply depends on the work and premises. Specialist advice may be needed where risks are complex or regulated activity is involved.

Then translate each duty into a practical control. “Maintain safe access and escape routes” is a requirement. “Site manager completes and records a weekly escape-route inspection, raises defects immediately and closes them with evidence” is a workable process.

What a health and safety compliance checklist should contain

A useful checklist links each item to a location, responsible person, due date, frequency, evidence requirement and escalation route. Without those fields, teams may know what to check but still struggle to prove completion or spot overdue action.

The following categories form a solid operational baseline.

Site and building safety

Record routine checks for housekeeping, slips and trips, access routes, lighting, signage, welfare facilities, emergency exits and fire doors. Include site-specific controls such as visitor management, lone-working arrangements, security issues that affect safety and accessibility concerns.

Checks should capture more than a simple pass or fail. If a fault is found, the record should show its severity, interim controls, owner, target date and closure evidence. A photograph, repair record or reinspection may be needed to demonstrate that the risk was actually controlled.

Fire and emergency arrangements

Your checklist should cover the activities that support the fire risk assessment: alarm and emergency-light testing, extinguisher servicing, escape-route checks, evacuation drills, fire-door inspections, emergency plans and marshal training. Keep the frequency aligned with the risk assessment, manufacturers’ guidance and relevant standards.

Treat drill outcomes as evidence of learning, not a box-ticking exercise. If an evacuation reveals that visitors were not accounted for or a route was blocked, create an action and track it to completion. The original drill record and the corrective action should remain connected.

Risk assessments and hazardous substances

Maintain a register of current risk assessments, including review dates, affected teams and related controls. Make sure the checklist asks whether the assessment still reflects the work being done. New equipment, altered layouts, changed staffing, an incident or a new chemical can all trigger a review before the scheduled date.

For COSHH, record the substance, safety data sheet, assessment, storage arrangements, exposure controls, required PPE and staff instruction. The common failure is not the absence of a document. It is the gap between the document and the substance found in the cleaning cupboard, workshop or plant room.

Plant, equipment and maintenance

A planned maintenance schedule should sit alongside safety checks, not in a separate tracker that only the maintenance team can see. Include statutory inspections, servicing, defect reporting and asset history for items such as lifting equipment, pressure systems, electrical installations, emergency lighting, boilers and local exhaust ventilation where applicable.

Frequency matters, but evidence matters just as much. A completed service certificate should be tied to the relevant asset and site, with the next due date automatically visible. When an asset fails inspection, the system should show whether it was removed from use, what temporary safeguards were applied and when it returned to service.

People, training and contractors

A safe site depends on competent people. The checklist should track inductions, role-specific training, refresher dates, licences, first-aid provision, toolbox talks and confirmation that policies have been read. Training records should be easy to inspect by person, role and location.

Contractor control deserves the same discipline. Before work starts, confirm competence, insurance, risk assessments and method statements, permits where required, site induction and supervision arrangements. During the work, record inspections and any changes to scope. A contractor folder containing expired documents is not a control.

Incidents, actions and reporting

Include a clear route for reporting accidents, near misses, dangerous occurrences and unsafe conditions. The right response is proportionate: not every event needs a lengthy investigation, but every report needs triage, ownership and a decision that can be defended.

Where an investigation is required, keep the event, findings, actions and evidence together. Trends are often more revealing than a single incident. Repeated slips in one corridor, recurring equipment defects or frequent manual-handling reports may indicate a wider control failure that a monthly dashboard should expose.

Build it around frequency and ownership

A long checklist is not necessarily a better one. If it takes hours to complete and provides no useful evidence, staff will rush it or work around it. Separate daily, weekly, monthly, quarterly and annual activities so that each role sees only the work relevant to them.

Daily checks might focus on immediate conditions such as access routes, spillages, fire exits and site opening controls. Monthly work may cover management inspections, trend reviews and emergency equipment checks. Annual tasks are more likely to include policy review, formal training renewal and specialist inspections. The correct rhythm depends on the risk, legal requirement and equipment guidance.

Every task needs one accountable owner, even where several people contribute. Shared responsibility often becomes unowned work. Set escalation rules for overdue, failed or high-risk checks, including who receives the alert and when an issue must be raised beyond the site team.

Make evidence part of the task

Compliance becomes difficult to defend when evidence is scattered across paper forms, email chains, shared drives and supplier portals. A checklist should state the evidence expected for each task: a time-stamped completion record, photo, signature, certificate, inspection result, corrective action or updated assessment.

This is particularly valuable across multiple sites. A central view can show which checks are due, which sites have recurring failures and which documents are nearing expiry, while local teams can complete work on a mobile phone at the point of activity. QR codes on equipment or in plant rooms can take a user directly to the right asset record, form or procedure.

Platforms such as CalmCompliance bring these records together across the physical site, compliance requirements and people responsible for delivery. The practical benefit is not simply fewer spreadsheets. It is a live chain of evidence from an obligation to a completed task, corrective action and reportable outcome.

Test whether your checklist is audit-ready

Before an audit, inspection or incident forces the question, select several completed checks at random. Can you identify the relevant requirement, see who performed the task, confirm when it was done, review the evidence and find any action that followed? Can you do this in minutes rather than chasing several teams?

Also test the exception process. A perfect completion rate can be a warning sign if sites rarely report defects. Staff need a straightforward way to say that a check failed, an asset is unsafe or a control no longer works. Good compliance reporting makes problems visible early, when they are cheaper and safer to resolve.

The aim is not to create more administration. It is to make safe work the normal way work is done, with proof assembled as part of the process. When the next inspection, audit or difficult question arrives, your team should be able to show control without having to reconstruct it.